Cybersecurity & CDI Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and ongoing maintenance of cybersecurity controls outlined in NIST SP 800-171 to safeguard Covered Defense Information, ensuring compliance with federal standards for protecting sensitive government data. This includes establishing, documenting, and continuously enforcing a robust security posture across all systems handling CDI, with a focus on access control, audit monitoring, configuration management, and incident response. Annual assessments are mandated to verify adherence to the control framework, and any security incidents involving CDI must be reported promptly in accordance with established protocols. The effort is structured as a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance required at New Cumberland, Pennsylvania, 17070-5002. The work falls under NAICS code 541512, indicating IT consulting services, and all responses must be submitted by July 22, 2026. While no set-aside designation is specified, the contractor must be prepared to demonstrate full capability in executing and sustaining the required cybersecurity framework and reporting mechanisms throughout the contract period.